Overview
- SBI disclosed Wednesday that a preliminary review of about 375,000 records circulating on the dark web identified 3,897 customer records containing personally identifiable information.
- The exposed fields listed by the bank include names, registered mobile numbers, dates of birth, email and residential addresses, plus branch and CIF identifiers, lead IDs and loan‑related metadata.
- SBI said it received alerts on October 16 from its threat intelligence provider, the Defence Cyber Agency and CERT‑In and that it activated cyber incident response and containment protocols.
- Investigators have not yet confirmed whether the data came from SBI systems, vendors or older breaches, and a forensic probe by the independent CERT‑In‑empanelled agency is under way to check authenticity and scope.
- Security experts and civil‑society groups warn the disclosed PII increases risk of targeted phishing, identity theft and loan fraud and are pressing the bank to notify affected customers and strengthen vendor oversight.